Changes

'''DuQu''' is [[computer]] [[malware]] classified as a Trojan Horse.  It is built with the same basic source code of [[Stuxnet]], so it has been concluded that this malware was designed and released by the same party responsible for Stuxnet.  Some are even referring to DuQu as Stuxnet 2.0.<ref>http://www.pcworld.com/article/242114/duqu_new_malware_is_stuxnet_2.html</ref>  In general, this Trojan Horse was designed for intelligence gathering and espionage.<ref>http://www.kaspersky.com/about/press/major_malware_outbreaks/duqu</ref>  There have been two versions of this malware released so far—the latter was detected in June 2015.<ref>http://www.kaspersky.com/about/news/virus/2015/Duqu-is-back</ref>

'''DuQu''' is [[computer]] [[malware]] classified as a Trojan Horse.  It is built with the same basic source code of [[Stuxnet]], so it has been concluded that this malware was designed and released by the same party responsible for Stuxnet.  Some are even referring to DuQu as Stuxnet 2.0.<ref>http://www.pcworld.com/article/242114/duqu_new_malware_is_stuxnet_2.html</ref>  In general, this [[Trojan Horse (malware)|Trojan Horse]] was designed for intelligence gathering and espionage.<ref>http://www.kaspersky.com/about/press/major_malware_outbreaks/duqu</ref>  There have been two versions of this malware released so far—the latter was detected in June 2015.<ref>http://www.kaspersky.com/about/news/virus/2015/Duqu-is-back</ref>

==Technical Specifics==

==Technical Specifics==

Duqu is often delivered as a [[Microsoft]] [[Word]] document.  Once opened, it exploits what was at the time of release a 0-day vulnerability (that is, one which was completely unknown) in font handling.  Once a computer is infected, it opens a "back door" and begins downloading the main content of the malware.  It also has rootkit functionality, so it can run nearly invisibly on the host computer.<ref>https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99</ref><ref>https://securelist.com/blog/incidents/32463/duqu-faq-33</ref>

Duqu is often delivered as a [[Microsoft]] [[Word]] document.  Once opened, it exploits what was at the time of release a [[Zero-day (computing)|zero-day vulnerability]] (that is, one which was completely unknown) in font handling.  Once a computer is infected, it opens a "back door" and begins downloading the main content of the malware.  It also has rootkit functionality, so it can run nearly invisibly on the host computer.<ref>https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99</ref><ref>https://securelist.com/blog/incidents/32463/duqu-faq-33</ref>

===Vulnerable [[Operating system|Operating System]]s===

===Vulnerable [[Operating system|Operating System]]s===

*Windows NT  

*Windows NT